
$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
File: PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft (raw, json)
Hash identifier: s3LhcVEQWj4Oe66Owp2xrzZgmS6x1/aaQDMhiW21g34=
Subject key identifier: 97:C2:A4:05:E9:42:70:FA:F9:B3:36:9B:A2:69:A7:78:62:2B:26:0E
Authority key identifier: 3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
Certificate issuer: /CN=A91CB7AB/serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Certificate serial: 08F7
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
Manifest number: 0850
Signing time: Sat 18 Apr 2026 21:19:36 +0000
Manifest this update: Sat 18 Apr 2026 21:19:35 +0000
Manifest next update: Sat 25 Apr 2026 21:19:35 +0000
Files and hashes: 1: PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl (hash: xYG1inH9YnxMTtap4l5W7e5mtyFAlhwMBTOW1OhvGOM=)
2: E2FEA6DA3E5411EF9B398D2DC4F9AE02.roa (hash: 4maJF9WUbj7sjherc9bKMjHY3wXl4HcmhFEcf5r/F/Q=)
3: 5CDB2402FD6D11EE951DE436C4F9AE02.roa (hash: GPPwnFCIcpt0RgF++70GuCleWCDXuGcVYR4o3iza94k=)
4: 5B2236E6FD6D11EE951DE436C4F9AE02.roa (hash: wVxc6nx/JmhL7VCPOsNGEB8sGimUMjqS6K/WHE14sqo=)
5: 0112375EA05411EDB043385AC4F9AE02.roa (hash: wt7sHeBZYX3+ynpGbSY8k/1ymNfDI2lkoFnaTMVP/Ps=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Apr 2026 21:19:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2295 (0x8f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91CB7AB, serialNumber=3DE9D3DFF6E048FD908146502E4F08E456F3D9BC
Validity
Not Before: Apr 18 21:19:35 2026 GMT
Not After : Apr 25 21:19:35 2026 GMT
Subject: CN=69e3f567-3a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:85:16:69:9b:ab:17:a1:91:a9:f5:c7:5f:cb:
bc:b5:72:a6:9a:ba:15:1c:c1:8b:e6:02:42:50:ca:
b0:8f:0c:ee:9c:e0:8d:ef:9c:38:54:8d:48:79:82:
22:fe:76:06:6f:c3:33:fe:e1:61:18:44:d8:83:99:
b6:67:e4:42:84:6c:0f:53:11:ca:08:68:77:af:71:
11:5f:d0:3b:70:87:57:74:6c:0a:cc:8a:ba:e5:cc:
0b:71:eb:51:ec:7c:0b:92:d0:12:cb:0e:c2:58:c6:
da:d7:4e:98:40:04:57:b9:5e:dd:37:57:16:75:06:
5a:4b:77:76:26:fd:70:2f:ae:dc:71:6e:6f:b1:ca:
ff:92:54:5e:78:60:2d:9e:00:7d:29:0e:b1:10:e4:
fe:56:c1:73:5d:3b:15:5f:23:31:3c:08:30:e8:94:
c3:2e:3e:10:ca:94:c6:2f:98:d1:0b:f9:d2:03:d1:
3a:e3:5a:81:b5:17:d3:9e:00:59:4a:b1:7c:73:76:
df:cf:7b:38:fe:c3:90:bc:3e:4b:1a:16:2f:66:65:
22:68:c9:ae:e1:6a:57:36:5a:1e:34:dd:5f:9c:b8:
4a:9c:f0:7e:87:1f:e6:a2:67:12:4e:6f:62:b3:8b:
4a:b1:58:ce:2e:97:8a:a8:8b:26:57:d1:a7:9c:dc:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:C2:A4:05:E9:42:70:FA:F9:B3:36:9B:A2:69:A7:78:62:2B:26:0E
X509v3 Authority Key Identifier:
keyid:3D:E9:D3:DF:F6:E0:48:FD:90:81:46:50:2E:4F:08:E4:56:F3:D9:BC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PenT3_bgSP2QgUZQLk8I5Fbz2bw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB7AB/56786568400911EBA374225BC4F9AE02/PenT3_bgSP2QgUZQLk8I5Fbz2bw.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
c2:92:41:ea:d1:b3:e2:b5:7b:e0:f8:dc:52:a7:cd:73:4c:f1:
fe:57:bc:7f:ff:11:cf:1b:97:41:82:88:66:0c:8d:2c:77:69:
fb:b8:48:61:bd:df:ae:9d:79:a9:fd:13:0e:59:4d:f4:a6:e9:
91:e0:e6:25:e3:db:4a:40:ad:a2:cd:38:fe:73:49:06:7b:6b:
2e:8e:7c:c2:23:e8:55:b7:73:70:2b:bf:48:be:0c:f0:f4:7e:
bd:14:b5:c4:fc:56:34:ef:7c:f8:bf:cd:41:bb:95:82:b0:71:
f3:f3:ac:86:f9:29:11:c1:f7:a6:69:b9:48:b8:72:96:07:43:
d6:bb:7b:de:73:e6:bf:b9:e0:1b:7d:62:c1:08:9a:1d:89:87:
f1:97:43:ef:32:f7:1c:1f:af:ab:5f:4d:aa:2e:52:4b:27:74:
3f:a6:8a:b2:6b:2c:91:27:d7:8c:db:18:eb:a1:50:f1:aa:2e:
b5:a2:09:05:27:cb:b7:b7:20:fd:3b:e5:81:2b:b2:27:a1:5b:
3f:8f:2f:bc:ea:a5:49:59:15:47:f2:0b:24:ae:4f:28:b4:45:
19:00:16:57:42:8b:2f:08:e7:f2:4b:70:73:10:c3:30:b7:db:
06:1e:88:8e:8a:d3:19:ed:02:f8:05:bd:3f:49:30:e4:b3:28:
9b:ad:d6:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:47:55 2026 by rpki-client